F5 BIG-IP Privilege Escalation Vulnerability in Appliance Mode

A vulnerability in BIG-IP systems may allow an authenticated attacker with administrative access to escalate privileges, potentially crossing a security boundary. This issue affects several versions within the BIG-IP 16.x, 17.x, and 21.x branches.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to execute arbitrary system commands with elevated rights, thereby bypassing Appliance mode security.

Remediation

Users can upgrade to BIG-IP versions 17.5.1.4, 17.1.3.1, or 21.0.0.1. For more information about managing BIG-IP product hotfixes, refer to the F5 article K13123.